Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Linux & BSD's lpr exploit
From: capitan () sunset backbone olemiss edu (Capitan)
Date: Wed, 30 Oct 1996 16:54:01 -0600

I tried to use the lpr exploit on my machine which runs Redhat 4.0.
It says "lpr: lp: unknown printer".  It is setuid.  I was wondering if you
could set lp so that the program would work.  You could do it by
enviroment variable, but what would you set it to if there isn't a printer
for the machine.  Is it just not possible for the bug to work on Redhat
4.0?  I would hate for one of my users to find a way to exploit it after i
thought it was safe.   My kernel version is 2.0.23, but I'm going to
upgrade it to 2.0.24 tonight.

Do I not need to worry about this bug?  any help is appreciated.

Mark Nicholas

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]